📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two regulatory frameworks—PSD3/PSR and the AI Act—resulting in a slower but more open infrastructure. This contrasts with the US’s faster, private network-based approach.
European law currently prevents AI agents from making payments without human authorization, despite technological capabilities. This is due to two regulatory regimes—PSD3/PSR and the AI Act—being implemented simultaneously, shaping the future of agentic commerce in Europe.
The core issue is that European law requires human approval for online payments, which restricts AI agents from acting as payers. Unlike the US, where private payment networks like Mastercard and Visa enable agent payments through commercial rails, Europe’s payment infrastructure is governed by statutes, notably PSD2, PSD3, and the upcoming Payment Services Regulation (PSR). These regulations mandate multi-factor human authentication and API parity, effectively rebuilding the payment rails into a statutory framework that banks and financial institutions must follow. Concurrently, the EU AI Act classifies high-risk AI systems—such as those used for credit scoring and fraud detection—as subject to strict conformity assessments, human oversight, and registration, further constraining the deployment of autonomous agents.This convergence means that the European agentic commerce system is being co-defined by two separate but intersecting regulatory regimes. The PSD3/PSR rebuilds the payment infrastructure with open, API-driven interfaces, while the AI Act establishes guardrails for AI systems, emphasizing safety and oversight. These regimes were not designed together, resulting in seams—where the ability of an agent to pay depends on the intersection of payment law and AI regulation. The process is slower than the US, where private networks and decision-making authority enable faster deployment of agentic payments, but potentially more durable due to the law-based, open nature of the infrastructure.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications for European and Global Digital Commerce
This regulatory approach makes European agentic commerce more deliberate and transparent, emphasizing open finance and API accessibility. While slower to develop, the statutory infrastructure is less susceptible to private control, potentially leading to a more resilient and equitable market. The contrasting US model, built on private, proprietary rails, offers speed and concentration but may limit openness and competition. The European system’s design could influence global standards for privacy, security, and interoperability, shaping the future of AI-driven financial services worldwide.European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks Shaping Agentic Payments
The European Union has been steadily reforming its digital payment laws, with PSD2 laying the groundwork for open banking. PSD3 and the PSR are set to further rebuild payment infrastructure, requiring banks to expose APIs and facilitate direct access for nonbank entities. Simultaneously, the EU AI Act, agreed in November 2025 and scheduled for implementation in 2026, classifies high-risk AI systems, imposing strict compliance and oversight requirements. These developments are unfolding separately but are now converging, creating a unique, statutory foundation for agentic commerce that differs fundamentally from the US approach, which relies on private networks and decision-making authority.“The European approach to agentic commerce is not just about technology; it’s about building a legal infrastructure that will shape how AI agents operate for years to come.”
— Thorsten Meyer
AI compliance software for financial institutions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Aspects of the EU’s Regulatory Convergence
It remains unclear how quickly the European legislative process will finalize PSD3/PSR and the AI Act, with potential delays pushing implementation beyond initial timelines. Additionally, the practical integration of these regimes—how they will function together in real-world agentic transactions—is still evolving, and the impact on AI agent capabilities remains uncertain.
multi-factor authentication hardware devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Legislative Milestones and Industry Adaptation
Legislative bodies will finalize PSD3 and PSR drafts by mid-2026, with full implementation expected by 2028. The AI Act’s high-risk classification and compliance deadlines are also approaching, likely by 2027. Industry players are preparing for these changes, with banks, fintechs, and AI developers adjusting their systems to meet new standards. Observers will monitor how these laws influence the speed, openness, and functionality of agentic commerce in Europe.
Why and How to Create Effective AI Prompts for Regulatory Compliance: Governing AI Interaction in Financial Institutions (Responsible Regulatory Compliance)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US for agentic payments?
Europe relies on statutory, law-based payment rails with open APIs and mandatory human authentication, while the US uses private, commercial networks that enable faster, decision-driven agent payments.
When will the European legislation for agentic commerce be fully in place?
Legislation such as PSD3 and the PSR are expected to be finalized by 2026-2028, with the AI Act high-risk obligations possibly starting in 2027.
What are the main challenges for deploying AI agents in Europe?
The primary challenge is navigating the complex, statutory regulatory environment—ensuring compliance with payment authentication, API standards, and AI high-risk obligations—before AI agents can operate fully as payers or decision-makers.
Will Europe’s slower, law-based approach be more effective?
It may be more durable and equitable, fostering open finance and reducing private control, but its effectiveness depends on legislative speed and industry adaptation.
Source: ThorstenMeyerAI.com
